arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1004.0602cs.NIcs.CR
收藏

基于移动代理的智能检测系统框架

Intelligent Detection System framework using Mobile agents

N. Jaisankar, R. Saravanan, K. Durai Swamy

摘要:

基于移动代理的入侵检测系统框架是一种分层的框架机制,旨在支持异构网络环境,以最佳方式识别入侵者。传统的计算机误用检测技术可以有效地识别已知的攻击,但在其他情况下表现得很差。异常检测具有检测未知攻击的潜力;然而,这是一项非常具有挑战性的任务,因为其目的是在没有任何关于特定入侵的先验知识的情况下检测未知攻击。这项技术仍处于早期阶段。本文的目标是该系统可以检测到异常的用户活动。现有的研究在这一领域集中在用户活动或程序操作,但不是同时在这两个。在本文中,试图同时看两个。基于一个入侵检测框架[1],实现了一个新的用户异常检测系统,并通过分析用户活动和程序运行活动,在模拟环境中进行了多个入侵检测实验。建议的框架是一个分层的框架,这是为了满足IDS的核心目的,并允许检测入侵尽可能快地与可用的数据使用移动代理。该框架的主要目的是提供安全的网络使用移动代理机制,增加移动功能,以监视来自不同的计算系统的用户进程。实验结果表明,该系统能够有效地检测用户的异常行为。

英文摘要:

An intrusion detection system framework using mobile agents is a layered framework mechanism designed to support heterogeneous network environments to identify intruders at its best. Traditional computer misuse detection techniques can identify known attacks efficiently, but perform very poorly in other cases. Anomaly detection has the potential to detect unknown attacks; however, it is a very challenging task since its aim is to detect unknown attacks without any priori knowledge about specific intrusions. This technology is still at its early stage. The objective of this paper is that the system can detect anomalous user activity. Existing research in this area focuses either on user activity or on program operation but not on both simultaneously. In this paper, an attempt to look at both concurrently is presented. Based on an intrusion detection framework [1], a novel user anomaly detection system has been implemented and conducted several intrusion detection experiments in a simulated environment by analyzing user activity and program operation activities. The proposed framework is a layered framework, which is designed to satisfy the core purpose of IDS, and allows detecting the intrusion as quickly as possible with available data using mobile agents. This framework was mainly designed to provide security for the network using mobile agent mechanisms to add mobility features to monitor the user processes from different computational systems. The experimental results have shown that the system can detect anomalous user activity effectively.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑